Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa
File: Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa (raw, json)
Hash identifier: QQnwLsS3aNsC6jrod8mH1TrmnCup6aH2qx4uUiV6rWs=
Subject key identifier: 16:26:AB:F8:43:5D:EA:79:E6:A0:47:42:5D:B2:E9:70:83:C8:0B:C9
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 0194258E50D59259D1802E4621CB116F7E8B
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa
Signing time: Thu 02 Jan 2025 05:47:51 +0000
ROA not before: Thu 02 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202013
IP address blocks: 185.105.248.0/24 maxlen: 24
185.105.249.0/24 maxlen: 24
185.105.250.0/24 maxlen: 24
185.105.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:50:d5:92:59:d1:80:2e:46:21:cb:11:6f:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jan 2 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1626abf8435dea79e6a047425db2e97083c80bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:3a:b2:1f:31:72:11:65:5b:8f:41:91:30:
f0:9d:76:de:5d:98:f7:dd:34:86:d4:f9:0d:c1:fa:
f1:f6:5b:1a:fa:86:8c:d1:c3:89:ed:16:ab:c1:fe:
3e:03:1d:af:f5:53:96:2e:20:2a:a8:ba:89:31:53:
eb:b7:f1:32:e4:31:f8:b5:59:3c:0d:cc:64:9d:4f:
ed:08:50:1a:1c:8d:1d:ba:95:87:39:37:46:67:9c:
fd:3c:ff:c1:8a:bf:6f:9f:fb:fa:87:2b:4e:c5:61:
f4:d5:a1:c8:90:9b:80:b1:c1:2c:53:0f:d7:93:fe:
70:69:b3:22:22:3c:02:84:45:44:f1:30:30:e0:c4:
66:b5:1c:eb:ce:c0:33:2f:e1:8b:e9:d4:5e:69:56:
5d:4f:4f:d4:a6:26:30:a0:59:e7:93:54:72:e4:e4:
59:e2:10:fd:33:8d:5c:3a:62:3e:fb:e2:ee:63:25:
00:0d:9e:8d:88:92:0e:49:1c:d4:f4:b6:01:1b:7f:
26:3f:4d:85:f9:7c:80:c9:ec:74:61:eb:10:1d:72:
2c:8e:df:ca:3c:e6:31:8d:ea:f8:31:31:9e:02:b5:
0e:97:28:bb:d3:3b:99:89:27:2a:4f:38:27:e1:97:
49:4a:f5:26:51:9a:23:8d:f8:67:db:2c:de:4e:7d:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:AB:F8:43:5D:EA:79:E6:A0:47:42:5D:B2:E9:70:83:C8:0B:C9
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.248.0/22
Signature Algorithm: sha256WithRSAEncryption
09:56:93:8f:f7:fe:c9:f9:52:38:a0:8d:67:c5:34:d8:17:b7:
97:ce:35:8f:6f:2e:dc:d6:f8:9c:7c:f6:c3:6d:6c:16:b5:09:
6d:91:cf:35:56:19:4a:23:14:c1:0a:1c:91:05:b0:d3:40:59:
46:37:41:be:b3:40:ff:22:3b:93:15:d5:db:2e:dc:8b:1d:85:
cd:1c:bf:0f:01:7a:6c:ae:ee:b1:a3:22:1b:38:4d:b1:1b:09:
4c:64:0a:b2:1f:7d:1c:69:94:ec:66:bf:5a:22:fc:b1:94:72:
3d:f5:ab:54:e5:65:17:14:01:f5:e0:e9:cc:54:cb:98:e1:09:
00:61:93:79:23:ac:d3:f1:7a:46:a6:2f:cd:a6:86:48:3e:1f:
8a:40:5f:91:aa:ee:32:82:6d:df:d3:75:dd:33:e0:58:ed:3a:
c6:6c:58:b1:47:f1:45:08:dd:23:55:15:f8:83:23:58:d0:4a:
16:1f:ea:72:f8:a4:c6:3a:88:a8:bf:46:5c:02:72:37:c4:3c:
2b:0b:5c:67:d7:83:d6:56:75:fa:17:44:cd:c2:75:49:3b:4e:
bb:c6:2b:62:d3:e6:1f:4c:9a:97:81:2b:87:ed:9e:25:94:d7:
17:cf:ab:43:9c:39:c8:04:f4:19:fe:64:9a:20:03:6f:0b:ec:
03:97:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:28 2025 by rpki-client